Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CC3744871B08B8A517C504156046C05A4EE392EFFC32DC71768581C3F8B0EE9B/0/34352e3138392e3135362e302f32322d3234203d3e20323635363130.roa
File:                     34352e3138392e3135362e302f32322d3234203d3e20323635363130.roa (raw, json)
Hash identifier:          4UOH8vEU+dWszW27LPvNzzCiggiv8lC29/gIoLsYIKc=
Subject key identifier:   3B:88:2A:8A:E8:CB:70:02:FA:56:7D:91:CB:DF:4A:D3:A7:4D:0F:4E
Certificate issuer:       /CN=B073DE428A660B4914AC48ECC20D3E70EE2C2B92
Certificate serial:       46B3D4F3D0521B17DBFFE326C251B839A2742C72
Authority key identifier: B0:73:DE:42:8A:66:0B:49:14:AC:48:EC:C2:0D:3E:70:EE:2C:2B:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B073DE428A660B4914AC48ECC20D3E70EE2C2B92.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CC3744871B08B8A517C504156046C05A4EE392EFFC32DC71768581C3F8B0EE9B/0/34352e3138392e3135362e302f32322d3234203d3e20323635363130.roa
Signing time:             Tue 04 Feb 2025 18:22:52 +0000
ROA not before:           Tue 04 Feb 2025 18:17:52 +0000
ROA not after:            Tue 03 Feb 2026 18:22:52 +0000
asID:                     265610
IP address blocks:        45.189.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CC3744871B08B8A517C504156046C05A4EE392EFFC32DC71768581C3F8B0EE9B/0/B073DE428A660B4914AC48ECC20D3E70EE2C2B92.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CC3744871B08B8A517C504156046C05A4EE392EFFC32DC71768581C3F8B0EE9B/0/B073DE428A660B4914AC48ECC20D3E70EE2C2B92.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B073DE428A660B4914AC48ECC20D3E70EE2C2B92.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 16:20:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:b3:d4:f3:d0:52:1b:17:db:ff:e3:26:c2:51:b8:39:a2:74:2c:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B073DE428A660B4914AC48ECC20D3E70EE2C2B92
        Validity
            Not Before: Feb  4 18:17:52 2025 GMT
            Not After : Feb  3 18:22:52 2026 GMT
        Subject: CN=3B882A8AE8CB7002FA567D91CBDF4AD3A74D0F4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:f2:3d:41:53:4b:99:17:98:65:87:a2:62:13:
                    13:b9:50:15:34:1e:c4:89:a4:36:5a:d9:6e:a1:ec:
                    4f:6b:40:f0:6d:a8:53:6b:6f:3e:ec:e6:e0:c6:53:
                    15:13:89:51:b9:7c:c2:60:3a:37:60:cd:da:fd:d7:
                    a0:9c:c6:2e:da:45:07:bf:fa:79:87:f8:19:91:ce:
                    43:b6:26:f7:42:a0:8b:e6:d3:8c:94:13:ba:83:15:
                    f3:53:3f:9d:ee:dc:0f:a9:f7:44:0c:93:15:6d:9c:
                    73:20:59:77:10:6d:ee:46:1f:ba:5e:af:c3:2d:62:
                    80:f0:39:f9:8a:72:e2:5d:3a:dd:3d:83:ce:eb:66:
                    fe:9e:fe:3a:40:1f:70:56:2c:11:aa:22:16:e9:e7:
                    a1:bd:db:6b:90:b9:61:3b:a8:50:f0:68:94:bf:39:
                    48:90:ff:b6:82:7a:24:83:b3:12:e0:04:db:0d:7f:
                    07:5c:7a:77:e9:6b:04:6f:7f:cb:ae:f7:91:20:ea:
                    48:87:f4:e5:94:e7:68:7e:57:8f:59:f4:10:21:0f:
                    13:aa:7f:bd:f7:6c:12:a0:68:ca:ba:c2:62:02:88:
                    ad:db:72:bf:53:26:1b:f5:ff:8d:18:c3:59:4e:13:
                    56:7e:b9:b3:d1:06:e4:c5:c1:04:98:ee:a6:16:54:
                    68:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:88:2A:8A:E8:CB:70:02:FA:56:7D:91:CB:DF:4A:D3:A7:4D:0F:4E
            X509v3 Authority Key Identifier:
                keyid:B0:73:DE:42:8A:66:0B:49:14:AC:48:EC:C2:0D:3E:70:EE:2C:2B:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CC3744871B08B8A517C504156046C05A4EE392EFFC32DC71768581C3F8B0EE9B/0/B073DE428A660B4914AC48ECC20D3E70EE2C2B92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B073DE428A660B4914AC48ECC20D3E70EE2C2B92.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CC3744871B08B8A517C504156046C05A4EE392EFFC32DC71768581C3F8B0EE9B/0/34352e3138392e3135362e302f32322d3234203d3e20323635363130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cb:fe:28:66:84:90:ef:cf:c3:7c:cd:d9:fa:1d:cb:13:6b:0b:
         d2:77:fd:97:55:5c:66:b7:06:c9:7c:2f:f5:08:5e:bb:60:27:
         03:00:86:06:4a:be:3a:c3:2a:07:cf:44:35:ff:3e:27:77:ab:
         dc:02:b3:05:02:f8:ae:45:82:03:2e:b7:4c:ad:24:2a:15:b3:
         d3:e9:0f:54:5e:07:3e:e4:62:e4:31:db:aa:93:fa:fb:1b:e2:
         48:4f:ce:ec:4c:21:2c:ec:2b:08:b1:5e:44:33:5e:78:04:99:
         b6:0a:9c:2a:cc:ca:f0:c7:0a:20:65:90:0a:55:81:2f:41:d2:
         2d:7e:35:46:70:5c:d7:6a:eb:2e:b0:9d:19:de:09:87:21:b0:
         af:e5:b2:2e:6a:dd:d9:2c:b1:74:ff:58:03:8e:65:f7:6d:42:
         66:19:30:19:30:ba:b4:d8:ca:84:67:b5:8b:05:72:2d:e8:7a:
         d5:a8:ee:5b:2f:c3:92:95:ad:0f:0a:cc:8e:79:bf:c7:39:92:
         49:44:f6:63:d3:b4:e6:07:0c:74:db:ab:76:44:26:f9:2d:70:
         6b:b9:57:44:58:19:e5:46:f1:6f:be:4c:dc:34:53:00:72:51:
         3e:be:02:22:b3:01:5f:bf:6c:bf:80:d5:4c:fc:ff:9c:e2:79:
         b5:69:25:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:55:44 2025 by rpki-client